Skip to content
OpenAdvisories

Product · iflytek

skillhub

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-110211

    SkillHub through 0.2.22 Missing Authorization in CLI Skill Delete Endpoint

    iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/{namespace}/{slug}. Attackers can locate targets through the anonymous se…

    iflytek skillhub
  • High 8.8
    CVE-2026-108550

    SkillHub before 0.2.22 Account Takeover via Account Merge Flow

    SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other accounts by abusing the merge flow. Attackers can call the merge initiate endpoin…

    iflytek skillhub